Add CRA Conformity Assessment Process and Open Source Policy conformity; improve architecture doc cross-references and typedoc coverage by Copilot · Pull Request #1289 · Hack23/riksdagsmonitor

Copilot · 2026-03-19T09:01:43Z

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

github-actions · 2026-03-19T09:02:20Z

🏷️ Automatic Labeling Summary

This PR has been automatically labeled based on the files changed and PR metadata.

Applied Labels: size-xs

Label Categories

🗳️ Content: news, dashboard, visualization, intelligence
💻 Technology: html-css, javascript, workflow, security
📊 Data: cia-data, riksdag-data, data-pipeline, schema
🌍 I18n: i18n, translation, rtl
🔒 ISMS: isms, iso-27001, nist-csf, cis-controls
🏗️ Infrastructure: ci-cd, deployment, performance, monitoring
🔄 Quality: testing, accessibility, documentation, refactor
🤖 AI: agent, skill, agentic-workflow

For more information, see .github/labeler.yml.

github-actions · 2026-03-19T09:02:49Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

…elated Documents sections to architecture docs Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions · 2026-03-19T09:18:12Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

…GRAM.md, FUTURE_SECURITY_ARCHITECTURE.md; fix FUTURE_ARCHITECTURE.md references Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions · 2026-03-19T09:21:00Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

…tions Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions · 2026-03-19T09:24:38Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

…ty to CRA-ASSESSMENT.md, update cross-references in SECURITY_ARCHITECTURE.md, THREAT_MODEL.md, README.md Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions · 2026-03-19T10:00:57Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

github-actions · 2026-03-19T10:07:40Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

Copilot

Pull request overview

This PR strengthens ISMS/CRA conformity evidence across the repository’s architecture and security documentation while expanding TypeDoc configuration and API documentation navigation to improve internal/external traceability.

Changes:

Added CRA Conformity Assessment Process + Open Source Policy conformity/alignment content and expanded cross-references across architecture/security docs.
Expanded FUTURE_THREAT_MODEL.md with attacker-centric analysis, attack trees, kill chain disruption, and LLM/workflow threat matrices.
Updated TypeDoc configuration (custom tags, navigation links, visibility settings) and TypeDoc tsconfig exclude globs; refreshed docs/API_README.md.

Reviewed changes

Copilot reviewed 19 out of 20 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
typedoc.json	Updates TypeDoc branding, block tags, navigation/sidebar links, and inclusion settings for broader API coverage.
tsconfig.typedoc.json	Refines exclude patterns (glob-based) for TypeDoc compilation scope.
THREAT_MODEL.md	Adds ISMS policy links for Open Source Policy and CRA Conformity Assessment Process.
SWOT.md	Adds “Hack23 ISMS Policies” cross-reference section.
STATEDIAGRAM.md	Adds “Hack23 ISMS Policies” cross-reference section.
SECURITY_ARCHITECTURE.md	Adds ISMS policy reference table and CRA policy entry in policy inventory.
README.md	Adds an “ISMS Policy Alignment” section with direct links to key policies.
MINDMAP.md	Adds “Hack23 ISMS Policies” cross-reference section.
FUTURE_THREAT_MODEL.md	Major expansion: attacker-centric modeling, attack trees, kill chain analysis, AI/LLM threat mapping, and monitoring KPIs.
FUTURE_SWOT.md	Adds “Related Documents” architecture portfolio table + ISMS policy links.
FUTURE_STATEDIAGRAM.md	Adds “Related Documents” architecture portfolio table + ISMS policy links.
FUTURE_SECURITY_ARCHITECTURE.md	Adds architecture portfolio cross-reference table.
FUTURE_MINDMAP.md	Adds “Related Documents” architecture portfolio table + ISMS policy links.
FUTURE_DATA_MODEL.md	Adds “Related Documents” architecture portfolio table + ISMS policy links.
FUTURE_ARCHITECTURE.md	Marks multiple future-doc entries as active and links them to the correct files.
FLOWCHART.md	Adds “Related Documents” architecture portfolio table + ISMS policy links.
docs/API_README.md	Expands compliance + architecture portfolio tables and adds ISMS policy references.
CRA-ASSESSMENT.md	Adds Open Source Policy conformity evidence + CRA Conformity Assessment Process alignment matrix; updates versioning metadata.
ARCHITECTURE.md	Adds “Related Documents” + ISMS policy/references and bumps document control version/date.
.gitignore	Adds an `api/` ignore rule (currently problematic given existing `/api/` and `docs/api/` usage).

CRA-ASSESSMENT.md

+
+| Requirement | Status | Evidence |
+|------------|--------|---------|
+| **CIA Triad Classification** | ✅ Declared | Public / High Integrity / High Availability |


pethers · 2026-03-19T10:13:24Z

@copilot apply changes based on the comments in this thread follow hack23 isms classification

…ISMS CLASSIFICATION.md Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot · 2026-03-19T10:17:52Z

@copilot apply changes based on the comments in this thread follow hack23 isms classification

Fixed in 9221b08. Aligned the CRA-ASSESSMENT.md Classification Selections table Availability from "Moderate" → "High" to match the README.md declaration (High — 99.998% design availability with AWS CloudFront multi-region + GitHub Pages DR, automated failover) and the OSP §5 CIA Triad declaration ("Public / High Integrity / High Availability"), per Hack23 ISMS CLASSIFICATION.md availability levels.

github-actions · 2026-03-19T10:18:49Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

Copilot

Pull request overview

This PR updates Riksdagsmonitor’s compliance and architecture documentation to explicitly align with Hack23 ISMS policies (notably Open Source Policy and CRA Conformity Assessment Process), while also improving TypeDoc configuration/coverage and documentation cross-linking across the architecture portfolio.

Changes:

Expand CRA and ISMS policy conformity content across CRA-ASSESSMENT.md, README.md, SECURITY_ARCHITECTURE.md, and THREAT_MODEL.md.
Add/standardize “Related Documents” + ISMS policy reference sections across multiple current/future architecture documents.
Adjust TypeDoc + tsconfig settings and related repo hygiene (e.g., ignore generated output).

Reviewed changes

Copilot reviewed 19 out of 20 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
typedoc.json	Refines TypeDoc branding, navigation links, tags, and visibility/sorting to improve generated API docs coverage.
tsconfig.typedoc.json	Tightens exclude globs for dashboard scripts and keeps generated `api` output excluded from compilation.
THREAT_MODEL.md	Adds explicit links to Open Source Policy and CRA Conformity Assessment Process in ISMS policy references.
SWOT.md	Adds a Hack23 ISMS policies reference section for consistency with the architecture portfolio.
STATEDIAGRAM.md	Adds a Hack23 ISMS policies reference section for consistency with the architecture portfolio.
SECURITY_ARCHITECTURE.md	Adds a dedicated ISMS Policy References table and includes CRA Conformity Assessment Process in governance table.
README.md	Adds an “ISMS Policy Alignment” section under security documentation.
MINDMAP.md	Adds a Hack23 ISMS policies reference section for consistency with the architecture portfolio.
FUTURE_THREAT_MODEL.md	Major expansion with future attacker/attack-surface content, plus broader related-doc links and updated document control metadata.
FUTURE_SWOT.md	Adds a related-documents section and Hack23 ISMS policy references.
FUTURE_STATEDIAGRAM.md	Adds a related-documents section and Hack23 ISMS policy references.
FUTURE_SECURITY_ARCHITECTURE.md	Adds a consolidated “Architecture Portfolio” cross-reference table.
FUTURE_MINDMAP.md	Adds a related-documents section and Hack23 ISMS policy references.
FUTURE_DATA_MODEL.md	Adds a related-documents section and Hack23 ISMS policy references.
FUTURE_ARCHITECTURE.md	Updates portfolio table items from “planned” to “active” and adds missing links to existing future docs.
FLOWCHART.md	Adds a related-documents section and Hack23 ISMS policy references.
docs/API_README.md	Reworks compliance/architecture doc pointers into structured tables and adds explicit ISMS policy links.
CRA-ASSESSMENT.md	Adds Open Source Policy conformity section and CRA Conformity Assessment Process alignment matrix + updates document control.
ARCHITECTURE.md	Adds related-documents + ISMS policy references and bumps version/date metadata.
.gitignore	Adds an ignore entry for `api/` (TypeDoc output), though an equivalent rule already exists.

FUTURE_THREAT_MODEL.md

 **✅ Approved by:** James Pether Sörling, CEO  
 **🔄 Review Cycle:** Quarterly (Feb, May, Aug, Nov)  
-**⏰ Next Review:** 2026-05-26  
+**⏰ Next Review:** 2026-06-19  


pethers · 2026-03-19T10:48:37Z

@copilot apply changes based on the comments in this thread

…ule (May not June) Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot · 2026-03-19T10:51:22Z

@copilot apply changes based on the comments in this thread

Fixed in 80f2ab8. Aligned FUTURE_THREAT_MODEL.md next review date from 2026-06-19 → 2026-05-19 to match the stated quarterly review cycle (Feb, May, Aug, Nov).

github-actions · 2026-03-19T10:52:24Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

github-actions · 2026-03-19T10:54:00Z

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

Initial plan

ada5e2a

Copilot AI assigned Copilot and pethers Mar 19, 2026

Copilot started work on behalf of pethers March 19, 2026 09:01 View session

github-actions bot added the size-xs Extra small change (< 10 lines) label Mar 19, 2026

Improve typedoc.json, tsconfig.typedoc.json, API_README.md, and add R…

d2ff5c4

…elated Documents sections to architecture docs Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions bot added documentation Documentation updates size-l Large change (250-1000 lines) labels Mar 19, 2026

Add Related Documents and ISMS policy links to FLOWCHART.md, STATEDIA…

c1bef29

…GRAM.md, FUTURE_SECURITY_ARCHITECTURE.md; fix FUTURE_ARCHITECTURE.md references Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions bot added security Security improvements isms ISMS compliance changes labels Mar 19, 2026

Add ISMS policy links to MINDMAP.md and SWOT.md Related Documents sec…

dc5b54a

…tions Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update architecture and security documents for compliance~~ Update architecture/security docs for ISMS compliance; improve typedoc coverage Mar 19, 2026

Copilot AI requested a review from pethers March 19, 2026 09:24

Copilot finished work on behalf of pethers March 19, 2026 09:24

Copilot started work on behalf of pethers March 19, 2026 09:51 View session

Add CRA Conformity Assessment Process and Open Source Policy conformi…

6863adf

…ty to CRA-ASSESSMENT.md, update cross-references in SECURITY_ARCHITECTURE.md, THREAT_MODEL.md, README.md Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

github-actions bot added iso-27001 ISO 27001 controls nist-csf NIST CSF compliance cis-controls CIS Controls labels Mar 19, 2026

Copilot AI changed the title ~~Update architecture/security docs for ISMS compliance; improve typedoc coverage~~ Add CRA Conformity Assessment Process and Open Source Policy conformity; improve architecture doc cross-references and typedoc coverage Mar 19, 2026

Copilot finished work on behalf of pethers March 19, 2026 10:05

Merge branch 'main' into copilot/update-architecture-security-docs

533d783

pethers marked this pull request as ready for review March 19, 2026 10:06

Copilot AI review requested due to automatic review settings March 19, 2026 10:06

Copilot AI reviewed Mar 19, 2026

View reviewed changes

CRA-ASSESSMENT.md

| Requirement | Status | Evidence |

|------------|--------|---------|

| **CIA Triad Classification** | ✅ Declared | Public / High Integrity / High Availability |

Copilot started work on behalf of pethers March 19, 2026 10:13 View session

fix: align CRA-ASSESSMENT.md Availability classification to High per …

9221b08

…ISMS CLASSIFICATION.md Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot finished work on behalf of pethers March 19, 2026 10:18

pethers requested a review from Copilot March 19, 2026 10:27

Copilot AI reviewed Mar 19, 2026

View reviewed changes

FUTURE_THREAT_MODEL.md Outdated

**✅ Approved by:** James Pether Sörling, CEO

**🔄 Review Cycle:** Quarterly (Feb, May, Aug, Nov)

**⏰ Next Review:** 2026-05-26

**⏰ Next Review:** 2026-06-19

Copilot started work on behalf of pethers March 19, 2026 10:48 View session

fix: align FUTURE_THREAT_MODEL.md next review date to quarterly sched…

80f2ab8

…ule (May not June) Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

Copilot finished work on behalf of pethers March 19, 2026 10:52

Merge branch 'main' into copilot/update-architecture-security-docs

47296d8

pethers merged commit 1af49ae into main Mar 19, 2026
11 checks passed

pethers deleted the copilot/update-architecture-security-docs branch March 19, 2026 10:53

Conversation

Copilot AI commented Mar 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 19, 2026

🏷️ Automatic Labeling Summary

Label Categories

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

pethers commented Mar 19, 2026

Uh oh!

Copilot AI commented Mar 19, 2026

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

pethers commented Mar 19, 2026

Uh oh!

Copilot AI commented Mar 19, 2026

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

Uh oh!

github-actions bot commented Mar 19, 2026

🔍 Lighthouse Performance Audit

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 19, 2026 •

edited

Loading